The information security manual produced by the Australian Cyber Security Centre outlines a cyber security framework that organisations can apply, using their risk management framework, to protect their information and systems from cyber threats.